Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/1tOYrSpYNVkxU-5bIyIEu7aU1zs.roa
File: 1tOYrSpYNVkxU-5bIyIEu7aU1zs.roa (raw, json)
Hash identifier: a84a4LVOwGrGH70VCtlwWX3dE8O9MW5+ohqcbnAW2ag=
Subject key identifier: D6:D3:98:AD:2A:58:35:59:31:53:EE:5B:23:22:04:BB:B6:94:D7:3B
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019D8296481289FEEFC869A18BE91074B51B
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/1tOYrSpYNVkxU-5bIyIEu7aU1zs.roa
Signing time: Sun 12 Apr 2026 16:46:20 +0000
ROA not before: Sun 12 Apr 2026 16:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214503
IP address blocks: 45.84.104.0/22 maxlen: 24
45.84.106.0/24 maxlen: 24
45.84.107.0/24 maxlen: 24
81.27.77.0/24 maxlen: 24
213.177.169.0/24 maxlen: 24
2a0d:bbc1::/48 maxlen: 48
2a0d:bbc7::/48 maxlen: 48
2a0d:bbc7:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:96:48:12:89:fe:ef:c8:69:a1:8b:e9:10:74:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Apr 12 16:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6d398ad2a5835593153ee5b232204bbb694d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:d8:8f:72:7c:81:74:74:43:1c:6c:c6:50:
95:ba:4b:2f:9c:00:2a:73:d7:32:44:ef:5f:31:64:
0c:a2:a9:ca:ca:52:3a:68:ff:47:c1:5e:93:f8:e8:
ba:20:a9:d0:21:f5:c5:15:e7:82:af:c3:20:97:d8:
03:dd:97:ba:c2:ab:44:32:59:d0:76:36:35:94:3f:
83:d2:5f:55:0a:03:0a:1d:1f:2c:f6:34:8d:06:e6:
a0:5e:91:bf:57:6a:3e:62:d0:02:e8:51:37:7d:7d:
9d:4e:5b:d6:f8:2b:c3:3e:8b:93:84:2d:52:8e:65:
0b:d0:0e:5f:bf:d7:94:51:ca:2c:3d:2c:cd:46:ae:
31:40:4a:21:c0:15:fa:a0:42:b0:c8:22:ad:25:e8:
95:2c:ad:db:85:f9:31:0d:fa:a9:27:a7:f6:90:38:
6a:b4:45:03:2b:90:5c:85:12:27:c2:68:d7:ad:52:
89:c6:22:b9:9c:73:93:86:b1:87:ac:80:4f:a5:81:
15:4b:59:e1:f5:c0:d2:fd:98:67:cc:75:2f:09:ff:
77:6c:52:d0:a9:81:ba:de:4c:4b:97:08:95:38:3c:
0c:d7:18:9b:cb:0e:c7:8f:84:7a:2e:f5:9a:87:bb:
a3:2d:90:cf:d9:ff:2f:67:f4:1c:e3:56:b3:5a:5e:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:98:AD:2A:58:35:59:31:53:EE:5B:23:22:04:BB:B6:94:D7:3B
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/1tOYrSpYNVkxU-5bIyIEu7aU1zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.104.0/22
81.27.77.0/24
213.177.169.0/24
IPv6:
2a0d:bbc1::/48
2a0d:bbc7::/47
Signature Algorithm: sha256WithRSAEncryption
53:56:73:db:55:c0:c9:2c:f8:de:8d:a9:1f:3c:9d:5d:79:7a:
4d:ef:6d:48:f1:da:3c:68:a2:af:b6:76:43:8a:da:b0:95:f2:
3a:c5:a7:e0:08:6d:05:cc:9b:88:33:5f:23:3e:06:d8:b4:56:
b3:31:a6:90:e2:51:64:f9:3c:3a:00:15:41:d0:72:cf:a9:67:
c7:4b:06:85:8d:e3:f2:a8:d5:a4:28:d9:3f:c8:57:ec:de:0f:
6f:35:84:25:00:be:2f:0d:4c:50:0f:9a:d2:88:f0:8c:5e:39:
5a:9d:ba:ad:5a:62:31:4e:24:5e:5a:c4:86:81:37:09:bc:cb:
57:d4:9e:b2:63:d8:75:38:d0:38:ab:2e:33:fe:ad:a9:e3:e1:
91:85:da:e1:1e:c1:6e:81:9f:7a:a6:f1:ab:be:6a:31:9e:3e:
7e:84:e2:26:e3:0a:4e:15:66:df:55:60:b0:a6:cf:91:5b:3d:
5b:39:c5:56:5f:a8:7c:bc:fc:47:c0:5c:64:63:2f:40:64:36:
e1:78:0e:de:73:cc:1a:62:16:7f:76:fa:7c:97:7b:b2:79:d7:
da:55:c1:18:d4:c1:9b:c9:75:8d:62:e9:c9:06:f8:c3:03:80:
ad:fd:4e:29:fb:69:7c:f1:d3:07:e0:14:a7:11:8d:af:87:af:
60:3e:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:27 2026 by rpki-client